California Penal Code § 530.5(a) provides that it is a crime to “willfully obtain[] personal identifying information … of another person” and use it “for any unlawful purpose, including to obtain, or attempt to obtain, credit, goods, services, real property, or medical information without the consent of that person.” “Personal identifying information” means “any name, address, telephone number” or one of many other identifying items (such as Social Security number, bank account number, and the like). And “person” covers not just individuals but also “any other legal entity,” including corporations.

Now you might think that this is a statute aimed at identity theft — i.e., impersonating someone to get credit, goods or services. And the statute is even called the California “identity theft” statute. But it is, oh, so much more! As California courts have read its terms, the statute

Contact Me

Reach me via email to admin[at]pogowasright.org.
You can find me on Twitter as @pogowasright.
I'm also on Jabber as [email protected]
If you know about a breach that should be included on this site or need to contact me about another matter, e-mail me: admin[at]databreaches.net
Alternate Email: breaches[at]protonmail.ch.
Need Signal for tips or leaks? It's available, as are Ricochet and Wire. Just ask.